Privacy policy

Last updated: October 2026

1. Controller

The controller responsible for processing personal data in this online shop is

SHS & P3 GmbH
Benzstraße 10
65779 Kelkheim (Taunus)
Germany
Phone: +49 (0) 6195 6774-0
E-mail: service@pacaradasystems.de

Further information about our company can be found in the imprint. For questions about data protection, you can reach us at the address or e-mail address given above.

2. General information

Our online shop at https://pacaradasystems.de is aimed exclusively at businesses, legal entities under public law and special funds under public law. Personal data is any information relating to an identified or identifiable natural person, for example the name, e-mail address or phone number of a contact person. We process this data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

All pages are transmitted in encrypted form (TLS). You can recognise an encrypted connection by "https://" in your browser's address bar.

3. Hosting and server log files

The online shop is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data on our behalf on servers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Each time the online shop is accessed, the server automatically stores information in log files: IP address, date and time of access, page accessed, amount of data transferred, status code, referrer URL, and browser and operating system. We need this data to run the shop securely and reliably and to detect faults or attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure operation of the online shop. The log files are deleted automatically after a short period unless they are needed for longer to investigate a specific security incident. This data is not combined with other data.

4. Cookies and consent management

The online shop uses technically necessary cookies. These include a session cookie that stores your basket and your login during your visit and is deleted when you close the browser or when the session expires. The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(b) and (f) GDPR.

Under "Privacy settings" in the footer of the page, you can decide whether content from external providers (for example videos from YouTube or Vimeo) may be loaded. Your choice is stored in your browser. Such content is only loaded after you have given your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent there at any time with effect for the future. The system films in our shop are stored on our own server and are played without external providers.

We do not use any analytics, tracking or advertising services. Fonts are loaded from our own server; there is no connection to Google Fonts or other font providers.

5. Customer account

Prices and ordering options are only visible after registration. When you register, we collect the company name, title, first and last name of the contact person, address, e-mail address and the password you choose (stored only as an encrypted hash value), as well as voluntary information such as a phone number or VAT identification number. We use this data to manage your customer account, to verify your status as a business and to process orders. The legal basis is Art. 6(1)(b) GDPR. You can have your customer account deleted at any time; a short message to service@pacaradasystems.de is sufficient. Data that we must retain for tax or commercial law reasons is blocked until the retention periods expire (see section 9).

6. Orders

To process your order, we process the information from your customer account, the billing and delivery address, the goods ordered including your cutting specifications, and the shipping and payment method. The order data is transferred to our merchandise management system JTL-Wawi, which we operate in our company, and used there for the order confirmation, invoice, delivery note and shipping. The legal basis is Art. 6(1)(b) GDPR and, for retention, Art. 6(1)(c) GDPR.

For delivery, we pass on the name, delivery address and, where necessary for delivery, the e-mail address or phone number to the shipping company we have commissioned: for parcels, DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany; for freight, the forwarding company we have commissioned. For payment by cash on delivery, the shipping company collects the invoice amount on delivery and receives the amount and the order number for this purpose. For payment by bank transfer (payment in advance), we receive from our bank the information you provide with the transfer. The legal basis is Art. 6(1)(b) GDPR.

7. Contact form and e-mail

If you write to us via the contact form or by e-mail, we process your information (name, company, e-mail address, phone number if applicable, subject and message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering enquiries. The contact form is protected against automated entries without third-party services. We delete the enquiry once it has been dealt with and there is no obligation to retain it.

8. E-mails about your order

We send order and shipping confirmations and messages about your customer account via the e-mail server of our hosting provider (section 3). We do not send a newsletter.

9. Recipients and storage period

Within our company, your data is only received by the people who need it for the purposes stated. Outside our company, it is only received by the recipients named in this policy and, where required by law, by authorities and our tax advisers. Data is not transferred to countries outside the European Union or the European Economic Area.

We store personal data for as long as is necessary for the respective purpose. We retain commercial and tax records such as invoices and accounting documents for up to eight or ten years in accordance with § 257 HGB and § 147 AO, and commercial and business letters for six years. The data is then deleted.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, please contact service@pacaradasystems.de. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany, phone +49 611 1408-0, e-mail poststelle@datenschutz.hessen.de.

11. Obligation to provide data, no automated decision-making

We need the information marked as mandatory in the registration and order form in order to conclude the contract. Without it, we cannot set up a customer account or accept an order. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12. Changes

We will update this privacy policy if the online shop or the legal requirements change. The version published here applies.

In case of doubt, the German version of this privacy policy prevails.